Category
CVE-2026-118938 describes how a crafted Python pickle can evade Fickling's safety analysis through a dotted attribute path, leaving an AI model scanner with a dangerous blind spot. Read More
A Red Hat-tracked Konflux CI vulnerability disclosure describes how unvalidated script output in manifest synchronization can cross into the workflow environment. Read More
Google Cloud’s Secure Source Manager now offers vulnerability scanning for known dependency issues across pull requests and repository security views. Read More
Google Cloud has made Google SecOps for SAP generally available, combining SAP log ingestion, normalized parsing, SAP-specific detections, and response workflows. Read More
Google Threat Intelligence Group says open-source multi-agent offensive frameworks are now being used in real intrusions, compressing familiar attack steps into much shorter bursts. Read More
GitLab Orbit is now generally available as a permission-aware context graph connecting code, pipelines, vulnerabilities, and ownership for AI agents and engineers. Read More